Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Autodesk Navisworks Freedom, Navisworks Manage, Navisworks Simulate — autodesk.com/trust/security-advisories/adsk-sa-2025-0002 Clear all filters
TI-2025-01426 CVE-2025-1660 · GHSA-r94p-hcr3-3qp9

DWFX File Parsing Memory Corruption Vulnerability

Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-120
TI-2025-01425 CVE-2025-1659 · GHSA-q6jw-4hgf-xx92

DWFX File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-125
TI-2025-01424 CVE-2025-1658 · GHSA-2cgh-f33f-2mv2

DWFX File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-125